-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On debian 9.4 the issue appears as follows:
>
> root@debian94x:/home/user# aptitude install apache2 libapache2-mod-fcgid
> The following NEW packages will be installed:
> apache2 apache2-bin{a} apache2-data{a} apache2-utils{a}
> libapache2-mod-fcgid libapr1{a} libaprutil1{a} libaprutil1-dbd-sqlite3{a}
> libaprutil1-ldap{a} ssl-cert{a} 0 packages upgraded, 10 newly installed, 0
> to remove and 0 not upgraded. Need to get 2,103 kB of archives. After
> unpacking 6,909 kB will be used. Do you want to continue? [Y/n/?]
> Get: 1 http://ftp2.de.debian.org/debian stretch/main amd64 libapr1 amd64
> 1.5.2-5 [96.6 kB] Get: 2 http://ftp2.de.debian.org/debian stretch/main
> amd64 libaprutil1 amd64 1.5.4-3 [85.8 kB] Get: 3
> http://ftp2.de.debian.org/debian stretch/main amd64 libaprutil1-dbd-sqlite3
> amd64 1.5.4-3 [19.3 kB] Get: 4 http://ftp2.de.debian.org/debian
> stretch/main amd64 libaprutil1-ldap amd64 1.5.4-3 [17.4 kB] Get: 5
> http://ftp2.de.debian.org/debian stretch/main amd64 apache2-bin amd64
> 2.4.25-3+deb9u3 [1,181 kB] Get: 6 http://ftp2.de.debian.org/debian
> stretch/main amd64 apache2-utils amd64 2.4.25-3+deb9u3 [217 kB] Get: 7
> http://ftp2.de.debian.org/debian stretch/main amd64 apache2-data all
> 2.4.25-3+deb9u3 [162 kB] Get: 8 http://ftp2.de.debian.org/debian
> stretch/main amd64 apache2 amd64 2.4.25-3+deb9u3 [235 kB] Get: 9
> http://ftp2.de.debian.org/debian stretch/main amd64 libapache2-mod-fcgid
> amd64 1:2.3.9-1+b1 [68.8 kB] Get: 10 http://ftp2.de.debian.org/debian
> stretch/main amd64 ssl-cert all 1.0.39 [20.8 kB] Fetched 2,103 kB in 0s
> (2,414 kB/s) Preconfiguring packages ... Selecting previously unselected
> package libapr1:amd64. (Reading database ... 89868 files and directories
> currently installed.) Preparing to
> unpack .../0-libapr1_1.5.2-5_amd64.deb ... Unpacking libapr1:amd64
> (1.5.2-5) ... Selecting previously unselected package libaprutil1:amd64.
> Preparing to unpack .../1-libaprutil1_1.5.4-3_amd64.deb ... Unpacking
> libaprutil1:amd64 (1.5.4-3) ... Selecting previously unselected package
> libaprutil1-dbd-sqlite3:amd64. Preparing to
> unpack .../2-libaprutil1-dbd-sqlite3_1.5.4-3_amd64.deb ... Unpacking
> libaprutil1-dbd-sqlite3:amd64 (1.5.4-3) ... Selecting previously unselected
> package libaprutil1-ldap:amd64. Preparing to
> unpack .../3-libaprutil1-ldap_1.5.4-3_amd64.deb ... Unpacking
> libaprutil1-ldap:amd64 (1.5.4-3) ... Selecting previously unselected
> package apache2-bin. Preparing to
> unpack .../4-apache2-bin_2.4.25-3+deb9u3_amd64.deb ... Unpacking
> apache2-bin (2.4.25-3+deb9u3) ... Selecting previously unselected package
> apache2-utils. Preparing to
> unpack .../5-apache2-utils_2.4.25-3+deb9u3_amd64.deb ... Unpacking
> apache2-utils (2.4.25-3+deb9u3) ... Selecting previously unselected package
> apache2-data. Preparing to
> unpack .../6-apache2-data_2.4.25-3+deb9u3_all.deb ... Unpacking
> apache2-data (2.4.25-3+deb9u3) ... Selecting previously unselected package
> apache2. Preparing to unpack .../7-apache2_2.4.25-3+deb9u3_amd64.deb ...
> Unpacking apache2 (2.4.25-3+deb9u3) ... Selecting previously unselected
> package libapache2-mod-fcgid. Preparing to
> unpack .../8-libapache2-mod-fcgid_1%3a2.3.9-1+b1_amd64.deb ... Unpacking
> libapache2-mod-fcgid (1:2.3.9-1+b1) ... Selecting previously unselected
> package ssl-cert. Preparing to unpack .../9-ssl-cert_1.0.39_all.deb ...
> Unpacking ssl-cert (1.0.39) ... Setting up libapr1:amd64 (1.5.2-5) ...
> Setting up apache2-data (2.4.25-3+deb9u3) ...
> Setting up ssl-cert (1.0.39) ...
> Processing triggers for libc-bin (2.24-11+deb9u3) ...
> Setting up libaprutil1:amd64 (1.5.4-3) ...
> Processing triggers for systemd (232-25+deb9u2) ...
> Processing triggers for man-db (2.7.6.1-2) ...
> Setting up libaprutil1-ldap:amd64 (1.5.4-3) ...
> Setting up libaprutil1-dbd-sqlite3:amd64 (1.5.4-3) ...
> Setting up apache2-utils (2.4.25-3+deb9u3) ...
> Setting up apache2-bin (2.4.25-3+deb9u3) ...
> Setting up apache2 (2.4.25-3+deb9u3) ...
> Enabling module mpm_event.
> Enabling module authz_core.
> Enabling module authz_host.
> Enabling module authn_core.
> Enabling module auth_basic.
> Enabling module access_compat.
> Enabling module authn_file.
> Enabling module authz_user.
> Enabling module alias.
> Enabling module dir.
> Enabling module autoindex.
> Enabling module env.
> Enabling module mime.
> Enabling module negotiation.
> Enabling module setenvif.
> Enabling module filter.
> Enabling module deflate.
> Enabling module status.
> Enabling module reqtimeout.
> Enabling conf charset.
> Enabling conf localized-error-pages.
> Enabling conf other-vhosts-access-log.
> Enabling conf security.
> Enabling conf serve-cgi-bin.
> Enabling site 000-default.
> Created symlink /etc/systemd/system/multi-user.target.wants/apache2.service
> → /lib/systemd/system/apache2.service. Created
> symlink
> /etc/systemd/system/multi-user.target.wants/apache-htcacheclean.service
> → /lib/systemd/system/apache-htcacheclean.service. Setting up
> libapache2-mod-fcgid (1:2.3.9-1+b1) ... apache2_invoke: Enable module fcgid
> Processing triggers for libc-bin (2.24-11+deb9u3) ... Processing triggers
> for systemd (232-25+deb9u2) ...
> @debian94x:/home/user# aptitude install dwww
> The following NEW packages will be installed:
> dctrl-tools{a} dlocate{a} doc-base{a} dwww info2www{a}
> libfile-ncopy-perl{a} libmime-types-perl{a} libuuid-perl{a}
> libyaml-tiny-perl{a} swish++{a} 0 packages upgraded, 10 newly installed, 0
> to remove and 0 not upgraded. Need to get 755 kB of archives. After
> unpacking 2,346 kB will be used. Do you want to continue? [Y/n/?]
> Get: 1 http://ftp2.de.debian.org/debian stretch/main amd64 dctrl-tools
> amd64 2.24-2+b1 [104 kB] Get: 2 http://ftp2.de.debian.org/debian
> stretch/main amd64 dlocate all 1.07+nmu1 [23.9 kB] Get: 3
> http://ftp2.de.debian.org/debian stretch/main amd64 libuuid-perl amd64
> 0.27-1 [18.1 kB] Get: 4 http://ftp2.de.debian.org/debian stretch/main amd64
> libyaml-tiny-perl all 1.70-1 [32.0 kB] Get: 5
> http://ftp2.de.debian.org/debian stretch/main amd64 doc-base all 0.10.7
> [100 kB] Get: 6 http://ftp2.de.debian.org/debian stretch/main amd64
> libfile-ncopy-perl all 0.36-1 [14.3 kB] Get: 7
> http://ftp2.de.debian.org/debian stretch/main amd64 libmime-types-perl all
> 2.13-1 [61.7 kB] Get: 8 http://ftp2.de.debian.org/debian stretch/main amd64
> dwww amd64 1.13.3+b1 [126 kB] Get: 9 http://ftp2.de.debian.org/debian
> stretch/main amd64 info2www all 1.2.2.9-24 [22.9 kB] Get: 10
> http://ftp2.de.debian.org/debian stretch/main amd64 swish++ amd64 6.1.5-4
> [252 kB] Fetched 755 kB in 0s (935 kB/s) Preconfiguring packages ...
> Selecting previously unselected package dctrl-tools. (Reading database ...
> 90585 files and directories currently installed.) Preparing to
> unpack .../0-dctrl-tools_2.24-2+b1_amd64.deb ... Unpacking dctrl-tools
> (2.24-2+b1) ... Selecting previously unselected package dlocate. Preparing
> to unpack .../1-dlocate_1.07+nmu1_all.deb ... Unpacking dlocate
> (1.07+nmu1) ... Selecting previously unselected package libuuid-perl.
> Preparing to unpack .../2-libuuid-perl_0.27-1_amd64.deb ... Unpacking
> libuuid-perl (0.27-1) ... Selecting previously unselected package
> libyaml-tiny-perl. Preparing to
> unpack .../3-libyaml-tiny-perl_1.70-1_all.deb ... Unpacking
> libyaml-tiny-perl (1.70-1) ... Selecting previously unselected package
> doc-base. Preparing to unpack .../4-doc-base_0.10.7_all.deb ...
> Unpacking doc-base (0.10.7) ...
> Selecting previously unselected package libfile-ncopy-perl.
> Preparing to unpack .../5-libfile-ncopy-perl_0.36-1_all.deb ...
> Unpacking libfile-ncopy-perl (0.36-1) ...
> Selecting previously unselected package libmime-types-perl.
> Preparing to unpack .../6-libmime-types-perl_2.13-1_all.deb ...
> Unpacking libmime-types-perl (2.13-1) ...
> Selecting previously unselected package dwww.
> Preparing to unpack .../7-dwww_1.13.3+b1_amd64.deb ...
> Unpacking dwww (1.13.3+b1) ...
> Selecting previously unselected package info2www.
> Preparing to unpack .../8-info2www_1.2.2.9-24_all.deb ...
> Unpacking info2www (1.2.2.9-24) ...
> Selecting previously unselected package swish++.
> Preparing to unpack .../9-swish++_6.1.5-4_amd64.deb ...
> Unpacking swish++ (6.1.5-4) ...
> Processing triggers for mime-support (3.60) ...
> Processing triggers for desktop-file-utils (0.23-1) ...
> Setting up dctrl-tools (2.24-2+b1) ...
> Setting up libyaml-tiny-perl (1.70-1) ...
> Setting up libmime-types-perl (2.13-1) ...
> Setting up libuuid-perl (0.27-1) ...
> Setting up doc-base (0.10.7) ...
> Registering 30 doc-base files...
> Registering documents with dwww...
> Registering documents with scrollkeeper...
> Setting up info2www (1.2.2.9-24) ...
> Setting up libfile-ncopy-perl (0.36-1) ...
> Setting up swish++ (6.1.5-4) ...
> Processing triggers for man-db (2.7.6.1-2) ...
> Setting up dlocate (1.07+nmu1) ...
> Setting up dwww (1.13.3+b1) ...
>
> Creating config file /etc/dwww/dwww.conf with new version
>
> Building dwww pages in the background...
> apache2_invoke: Enable configuration dwww
My first impression was, CGI might be not workable because of fcgid module is
not loaded properly into Apache, but it was loaded already, when I tried
a2enmod fcgid.
The other criticism would be, that there is no proper documentation on how to
set up the dwww package in fully workable order. My next guess would have
been, configuration-path is incorrect for CGI-scripts, or maybe fcgid is not
the right module. But, well, if you say it is because of the access-rights, it
is probably not too hard to fix.
In spite of it, I would actually like to set this to severity-level 3,
because there is no proper documentation on setup apart from this report in
the BTS, users seem to be supposed to figure things out for themselves.
I am going to tell you, how it went, also have a binary image there to make
things fully reproducible:
https://archive.org/details/Debian94EducationalKvm-imageWebserver
>
-----BEGIN PGP SIGNATURE-----
iF0EARECAB0WIQTF9uNaslvnJpWt8kXn6sEfJS3nCwUCWs46iQAKCRDn6sEfJS3n
C8PVAJ9ZAt2BkBtSJRsqKWqZ2go7WBxYiQCeLGOZKQ7pmtW/3wLaQ+EZmN3v6YE=
=q48O
-----END PGP SIGNATURE-----
